General

  • Target
    WizWorm_V5.rar
  • Size 47.3MB
  • Sample260710-a225dacw71
  • SHA256 b07fc769536a31ac5f3e44bfca4615f24870d68e534a9ab4fc7395e5af3dff3d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Unsigned PE 45 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 4 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • WizWorm_V5.rar
    .rar 47.3MB
  • WizWorm V5/ClientsFolder/0xr00tteam.txt
    48B
  • WizWorm V5/FastColoredTextBox.dll
    .dll 333KB
  • WizWorm V5/GMap.NET.Core.dll
    .dll 2.9MB
  • WizWorm V5/GMap.NET.WindowsForms.dll
    .dll 147KB
  • WizWorm V5/GeoIP.dat
    1.2MB
  • WizWorm V5/Guna.UI.dll
    .dll 876KB
  • WizWorm V5/Guna.UI2.dll
    .dll 1.9MB
  • WizWorm V5/IconExtractor.dll
    .dll 10KB
  • WizWorm V5/Icons/icon (1).ico
    97KB
  • WizWorm V5/Icons/icon (10).ico
    115KB
  • WizWorm V5/Icons/icon (11).ico
    9KB
  • WizWorm V5/Icons/icon (12).ico
    9KB
  • WizWorm V5/Icons/icon (13).ico
    361KB
  • WizWorm V5/Icons/icon (14).ico
    361KB
  • WizWorm V5/Icons/icon (15).ico
    361KB
  • WizWorm V5/Icons/icon (16).ico
    97KB
  • WizWorm V5/Icons/icon (17).ico
    66KB
  • WizWorm V5/Icons/icon (2).ico
    112KB
  • WizWorm V5/Icons/icon (3).ico
    131KB
  • WizWorm V5/Icons/icon (4).ico
    125KB
  • WizWorm V5/Icons/icon (5).ico
    100KB
  • WizWorm V5/Icons/icon (6).ico
    106KB
  • WizWorm V5/Icons/icon (7).ico
    164KB
  • WizWorm V5/Icons/icon (8).ico
    108KB
  • WizWorm V5/Icons/icon (9).ico
    264KB
  • WizWorm V5/NAudio.dll
    .dll 502KB
  • WizWorm V5/Plugins/ActiveWindows.dll
    .dll 14KB
  • WizWorm V5/Plugins/All-In-One.dll
    .dll 4.8MB
  • WizWorm V5/Plugins/Chat.dll
    .dll 18KB
  • WizWorm V5/Plugins/Clipboard.dll
    .dll 14KB
  • WizWorm V5/Plugins/FastColoredTextBox.dll
    .dll 333KB
  • WizWorm V5/Plugins/FileManager.dll
    .dll 27KB
  • WizWorm V5/Plugins/FileSeacher.dll
    .dll 478KB
  • WizWorm V5/Plugins/GMap.NET.Core.dll
    .dll 2.9MB
  • WizWorm V5/Plugins/GMap.NET.WindowsForms.dll
    .dll 147KB
  • WizWorm V5/Plugins/GeoIP.dat
    1.2MB
  • WizWorm V5/Plugins/Guna.UI.dll
    .dll 876KB
  • WizWorm V5/Plugins/Guna.UI2.dll
    .dll 1.9MB
  • WizWorm V5/Plugins/HRDP.dll
    .dll 1.7MB
  • WizWorm V5/Plugins/HVNC.dll
    .dll 58KB
  • WizWorm V5/Plugins/IconExtractor.dll
    .dll 10KB
  • WizWorm V5/Plugins/Informations.dll
    .dll 22KB
  • WizWorm V5/Plugins/Intro.wav
    238KB
  • WizWorm V5/Plugins/Keylogger.dll
    .dll 17KB
  • WizWorm V5/Plugins/Maps.dll
    .dll 15KB
  • WizWorm V5/Plugins/Microphone.dll
    .dll 540KB
  • WizWorm V5/Plugins/NAudio.dll
    .dll 502KB
  • WizWorm V5/Plugins/Ngrok-Disk.dll
    .dll 7.0MB
  • WizWorm V5/Plugins/Options.dll
    .dll 24KB
  • WizWorm V5/Plugins/Pastime.dll
    .dll 17KB
  • WizWorm V5/Plugins/Performance.dll
    .dll 15KB
  • WizWorm V5/Plugins/ProcessManager.dll
    .dll 17KB
  • WizWorm V5/Plugins/Programs.dll
    .dll 13KB
  • WizWorm V5/Plugins/Ransomware.dll
    .dll 20KB
  • WizWorm V5/Plugins/Recovery.dll
    .dll 1.3MB
  • WizWorm V5/Plugins/Recovery.pdb
    379KB
  • WizWorm V5/Plugins/Regedit.dll
    .dll 15KB
  • WizWorm V5/Plugins/RemoteDesktop.dll
    .dll 18KB
  • WizWorm V5/Plugins/ReverseProxy.dll
    .dll 16KB
  • WizWorm V5/Plugins/ReverseProxy.xml
    665B
  • WizWorm V5/Plugins/RunPE.dll
    .dll 11KB
  • WizWorm V5/Plugins/ServiceManager.dll
    .dll 14KB
  • WizWorm V5/Plugins/Shell.dll
    .dll 15KB
  • WizWorm V5/Plugins/SimpleObfuscator.dll
    .dll 1.2MB
  • WizWorm V5/Plugins/StartupManager.dll
    .dll 189KB
  • WizWorm V5/Plugins/System.Management.Automation.dll
    .dll 2.9MB
  • WizWorm V5/Plugins/TCPConnections.dll
    .dll 16KB
  • WizWorm V5/Plugins/UACBypass.dll
    .dll 12KB
  • WizWorm V5/Plugins/VB.NET Compiler.dll
    .dll 15KB
  • WizWorm V5/Plugins/WSound.dll
    .dll 539KB
  • WizWorm V5/Plugins/Wallpaper.dll
    .dll 8KB
  • WizWorm V5/Plugins/WebCam.dll
    .dll 209KB
  • WizWorm V5/Plugins/libcrypto-1_1-x64.dll
    .dll 3.3MB
  • WizWorm V5/Plugins/libpkcs11-helper-1.dll
    .dll 91KB
  • WizWorm V5/Plugins/libssl-1_1-x64.dll
    .dll 678KB
  • WizWorm V5/Plugins/lzo2.dll
    .dll 118KB
  • WizWorm V5/Plugins/openvpn-gui.exe
    .exe 792KB
  • WizWorm V5/Plugins/openvpn.exe
    .exe 821KB
  • WizWorm V5/Plugins/openvpnserv.exe
    .exe 62KB
  • WizWorm V5/Plugins/sound.wav
    1.5MB
  • WizWorm V5/Plugins/tapctl.exe
    .exe 36KB
  • WizWorm V5/Plugins/vcruntime140.dll
    .dll 94KB
  • WizWorm V5/SimpleObfuscator.dll
    .dll 1.2MB
  • WizWorm V5/WizWorm-r00t.exe
    .exe 21.7MB

WizWorm_V5.rar

  • SHA256 b07fc769536a31ac5f3e44bfca4615f24870d68e534a9ab4fc7395e5af3dff3d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
123